Re: bug#14380: 24.3; `network-stream-open-tls' fails in some imap servers on w32

[Ted Zlatanov]

On Sun, 26 May 2013 22:59:05 +0300 Eli Zaretskii <address@hidden> wrote: 

>> From: Ted Zlatanov <address@hidden>
>> Cc: address@hidden
>> Date: Sat, 25 May 2013 18:18:06 -0400
>> 
>> There's several lists where critical vulnerabilities are disclosed but I
>> don't follow them all; currently this seems like the best way:
>> http://web.nvd.nist.gov/view/vuln/search-results?query=gnutls&search_type=all&cves=on&uscert_ta=on&uscert_vn=on&oval_query=on

EZ> This seems to be very old.  This page looks much more relevant:

EZ>    http://gnutls.org/security.html

There's also BUGTRAQ at http://www.securityfocus.com/archive/1

I don't know of a single place to track vulnerabilities, honestly.  They
seem to be all over the place.

EZ> According to the latter, we are in good shape with 3.0.9.  I'll
EZ> probably look into updating to 3.2.x, once it stabilizes.

OK.  That's good to know, and thank you for looking into it.

Ted